Data Protection Notice – Hadooria Luxury Brand

Introduction

Hadooria is the realm of style, elegance, and mystery.

Our online presence reflects the same refined quality and attentiveness that define all our creations. It is important to us that our visitors and clients feel their personal data is safe within the world of Hadooria, which is why we treat data protection as a top priority.

This notice aims to present, in a transparent yet brand-appropriate and exclusive form, how we collect, use, and protect your personal data.

According to the GDPR, a privacy notice must include — among other things — the name and contact details of the data controller, the scope of processed data, the purpose, legal basis, and duration of data processing, information on data processors, cookie usage, and the rights of the data subjects.

Before data processing begins, users must be clearly and thoroughly informed of every fact relating to the handling of their data — in particular, the purpose and legal basis of processing, the identity of the controller, and the duration of data retention.

Information must also be provided on the rights of data subjects (including the right to information, deletion, rectification, and objection).

This document has been prepared in accordance with these legal requirements and the aesthetics of the Hadooria brand.

Data Controller

The website (hereinafter referred to as the “Website”) is operated by a business managing a luxury-brand project, bearing the elegance and responsibility of the Hadooria name.

Details identifying the Data Controller can be found at the end of this notice, allowing visitors to locate the information while preserving the exclusive atmosphere of the brand.

For inquiries regarding data protection, please contact:

📧 [email protected]
Website: https://hadooria.com

Scope, Purpose, and Legal Basis of Processed Personal Data

The Website serves solely to maintain communication between the luxury brand and its community.

It does not operate an online store, does not request payment data, and does not use third-party tracking services (such as Google Analytics or Meta Pixel).

Contact Form

• Processed data: name, email address, and message content.
• Purpose: responding to messages sent via the contact form and handling inquiries from those interested in the brand.
• Legal basis: consent of the data subject (Article 6 (1)(a) of the GDPR), given upon submitting the form. The privacy notice is made available alongside the form as a prerequisite for submission, meeting the requirement that details of data processing must be displayed adjacent to data collection.
• Retention period: data are stored for up to 6 months after the inquiry is closed, unless a contractual relationship arises that requires longer retention for legal reasons.

Newsletter Subscription

• Processed data: email address (optionally name).
• Purpose: providing regular updates on Hadooria’s new collections, events, and inspirations.
• Legal basis: consent (Article 6 (1)(a) of the GDPR). By subscribing, the user gives explicit consent, which can be withdrawn at any time.
• Retention period: until the user unsubscribes; after unsubscription, the email address is deleted within 30 days.

Technical Data and Cookies

During visits to the Website, the server may automatically log technical information (e.g. IP address, browser type, time of visit). These are processed based on legitimate interest to ensure security and stable website operation.

The Website primarily uses session cookies to maintain user experience; these are deleted when the browser is closed and do not store personally identifiable data.

No third-party analytical or advertising cookies are used.

Further details on cookies are provided in the cookie section of this notice.

Data Processors and Data Transfers

Hadooria does not share your data with external advertising service providers, does not use marketing automation systems, and does not transfer your data to third countries or international organizations.

The website hosting provider — as a technical service provider — may have limited access to the data solely for operating the web server.

We carefully select our data processors and contractually obligate them to handle data confidentially.

Unlike typical commercial websites, we do not use external newsletter mailing services.

Rights of Data Subjects

Under the GDPR, data subjects (i.e. you) have several rights that the Data Controller guarantees.

Requests to exercise these rights should be sent to [email protected].

• Right of access: You may request information on whether we process your personal data, and if so, what data, for what purpose, from what source, and for how long.
• Right to rectification: You may request correction of inaccurate data or completion of incomplete data at any time.
• Right to erasure (“right to be forgotten”): You may request deletion of your personal data, except where processing is required by law or contractual obligation.
• Right to restriction: You may request restriction of processing under certain conditions.
• Right to data portability: If processing is based on consent or contract, you have the right to receive your data in a structured, commonly used format and to request its transfer to another controller.
• Right to object: If data processing is based on legitimate interest, you may object to the processing of your data; in such cases, processing will cease unless compelling legitimate grounds
• Withdrawal of consent: You may withdraw your consent to newsletter processing at any time; withdrawal does not affect the lawfulness of processing before withdrawal.

Data Security

The Data Controller applies appropriate technical and organizational measures to ensure the security of personal data and to prevent unauthorized access.

We adhere to the principles of confidentiality, integrity, and availability, and continuously update our IT systems.

The Website is accessible only through a secure protocol (HTTPS); data from the contact form are transmitted via encrypted channels; data storage occurs in a password-protected and access-controlled environment.

Complaints and Legal Remedies

Hadooria strives to respond promptly and satisfactorily to all data protection inquiries.

If you believe our data processing does not comply with applicable laws, please contact us first.

If this does not resolve the matter, you may lodge a complaint with the supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)

Postal address: 1125 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: [email protected]

Modification of This Notice

We reserve the right to amend this notice at any time, taking into account legal changes and operational developments.

Updates will be published on the Website; such modifications do not affect data processing activities already completed.

Additional Company Details

To preserve transparency while maintaining the brand’s exclusive character, corporate details are provided in a separate section at the end of this notice.

The business operating the Hadooria brand (hereinafter: the Data Controller) functions under Hungarian law.

Company name: Haduzsán Viktória Ágnes EV – operating the Hadooria brand
Tax number: 90929133-2-41
Registered office: Budapest, Hungary (further details available in the company registry)
Company registration number: as issued by the competent court of registration
Contact: [email protected]

Details are available upon request — please contact the Data Controller via the email address above.